On Fri, Sep 05, 2014 at 11:19:35AM +0200, Piet Plomp wrote:
> 
> Hi Iustin,
> 
> On 2014-09-04 19:11, Iustin Pop wrote:
> [...]
> >
> > Just another datapoint: this is different from my case. No new users
> > created, randomly new files get -1 for a while, after which the correct
> > UID is listed.
> 
> No, this is not different: all new users get new files, which have never
> been served by the nfs server before. With me, "a while" might last
> forever for some identities.

I still don't understand what "new users" mean - as I said, I don't have
new users.

> When I create files or dirs, they may be owned by the infamous -2
> (4294967294), regardless _where_ I created them (i.e. through nfs or
> locally on the filesystem.

Exactly.

> You report that after a while the currect uid and gid are listed. Same for
> me, but sadly not always, some identities get stuck on 4294967294
> "forever".
> 
> I'm curious if we have any differences in our setups:
>   - Do you also have a mixture of wheezy and jessie systems? Is your nfs
> server also on a wheezy system? Are your clients both jessie and wheezy
> systems?

Only sid (unstable) clients. Server and some clients run custom
(upstream) kernels, some clients run sid kernel.

>   - Did you see any changes in the behaviour of the wheezy clients after
> the jessie clients mounted?

I don't have wheezy clients, so N/A.

>   - Do you have inet6 entries in /etc/netconfig enabled on the jessie
> clients (which is the default)?

Yes.

>   - Did you change /etc/idmapd.conf?

Yes. I tried to add static mappings for some users, but it didn't have
any positive effect.

>   - Did you change or add any files in /etc/request-key.d/ ? (small test:
> rename the id_resolver file, and suddenly _all_ identities are
> 4294967294)

No.

>   - Is the serving filesystem XFS formatted?

Interestingly, yes. Only XFS.

>   - Is NIS involved? Or LDAP? (A small test by copying the passwd, shadow
> and group entries to the client system: everything is ok).

No. Only 'compat' nssswitch entries.

>   - Do you use nsswitch to resolve identities (uid/gid)?

I don't understand - nsswitch is always used. Did you mean what nsswitch
configuration do I have? If so, it's just 'compat'.

>   - Does your client run a name service caching daemon (nscd or unscd)?

No.

>   - Did you see nobody/nogroup (65534/65534) identities too?

Yes.

> Just to make sure: this is nfs v4 (v4.0) only. Mounting with nfs version 3
> over tcp works fine.

Not using anything but kerberised nfs v4.

regards,
iustin

Attachment: signature.asc
Description: Digital signature

Reply via email to